Test automation and security research. Technique over journey.https://dmitriiev.dev/https://dmitriiev.dev/posts/ai-writes-tests-doesnt-grade-them/https://dmitriiev.dev/posts/ai-writes-tests-doesnt-grade-them/An LLM turns a described feature into a plausible Playwright spec cheaply. Trusting that spec is the hard part. So I built a pipeline where every stage is checked by something that did not produce it, and CI never calls a model at all.Tue, 21 Jul 2026 00:00:00 GMThttps://dmitriiev.dev/posts/passing-tests-never-talk-to-the-server/https://dmitriiev.dev/posts/passing-tests-never-talk-to-the-server/Inverting an assertion proves a test can fail, not that it checks the right value. A test can assert what the browser rendered instead of what the server sent, and stay green when the backend is wrong. So I corrupt the response and watch which greens never notice.Tue, 21 Jul 2026 00:00:00 GMThttps://dmitriiev.dev/posts/your-green-tests-are-lying/https://dmitriiev.dev/posts/your-green-tests-are-lying/A passing test only means something if it can fail. I inverted every primary assertion in a production Playwright suite to find out which greens were real. One test hadn't run in months.Wed, 15 Jul 2026 00:00:00 GMThttps://dmitriiev.dev/posts/revoke-that-didnt-take/https://dmitriiev.dev/posts/revoke-that-didnt-take/Everyone tests getting in. Almost nobody tests getting kicked out. The clean authz bug is the gap between the control plane saying revoked and the data plane still letting the old credential through.Mon, 29 Jun 2026 00:00:00 GMThttps://dmitriiev.dev/posts/ssrf-at-the-edges/https://dmitriiev.dev/posts/ssrf-at-the-edges/The core product passes every check, so you move on. The SSRF was in a side feature nobody armored: one of the half-dozen places the backend quietly fetches a URL on your behalf.Wed, 17 Jun 2026 00:00:00 GMThttps://dmitriiev.dev/posts/anti-ai-tells/https://dmitriiev.dev/posts/anti-ai-tells/Triagers now bounce AI-shaped reports on sight, valid or not. Here are the tells they pattern-match, and how to write so a human believes you.Sat, 13 Jun 2026 00:00:00 GMT